Framed-IP-Address to Proxy acct

Elton Machado elton.machado at tenforce.com
Fri Feb 5 23:38:41 CET 2016


Hi Alan,

First of all thanks for your help, the pre-proxy statement must go in the
site-enabled/default right?  or it goes in proxy.conf?

Should this work instead?

        update request {
                Framed-IP-Address := "%{Framed-IP-Address}"
        }



Regards,

Elton


It is not possible to use the
Date: Fri, 5 Feb 2016 13:43:47 -0500
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list
        <freeradius-users at lists.freeradius.org>
Subject: Re: Framed-IP-Address to Proxy acct
Message-ID: <345DD157-E00A-486D-AE46-1DBA3898AEB4 at deployingradius.com>
Content-Type: text/plain; charset=us-ascii

On Feb 4, 2016, at 6:55 PM, Elton Machado <elton.machado at tenforce.com>
wrote:
> How can I sent the Framed-IP-Address  to a acct remote proxy?

  Add the attribute to the packet in the pre-proxy section.

> My authentication is being done in a Remote Radius, and I need to send
back
> the accounting from Freeradius to another radius accounting server or at
> least duplicate accounting to there (Sonicwall)
>
> Since my Dell switch are not able to send the attribute 8 but only the mac
> address.

  OK.  That's fine.

>
> Freeradius is responsible for the DHCP and I can see the Framed-IP-Address
> being there and being set to the DHCP Client IP, but on my proxy acct
> server I don't see on the AVP the attr 8.

  The IP address is stored in an SQL database, along with the MAC address
of the machine.  So... when the server receives an Accounting-Request
packet containing a MAC address, look up the MAC in the SQL database to get
the IP address.

pre-proxy {
        ...

        update request {
                Framed-IP-Address := "%{sql:SELECT ...}"

        }
        ...
}

  You'll have to write the SQL select statement.  Test it by hand first,
and then add it to the server configuration.

  Alan DeKok.


More information about the Freeradius-Users mailing list